Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 9 horas
13,736
Total alertas
3106
Críticas
10358
Altas
8
Ransomware
1020
Esta semana
RSS
T Alto vulnerabilidad
17/06/2026
[CVE-2026-11409] An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler i…
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
nvdaltovulnerabilidad CVSS 7.2 NVD
T Alto vulnerabilidad
17/06/2026
[CVE-2026-11410] An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configurat…
An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Crítico vulnerabilidad
17/06/2026
[CVE-2026-10094] A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 t…
A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0068] In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC…
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. This could lead to local escalation of privilege if a user can install a malicious app with no additional execution privileges needed. User interaction is needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0071] In SettingsLib, there is a possible missing permission check due to a logic error in the code. This …
In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0081] In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could …
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0082] In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permissi…
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0083] In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This c…
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69176] Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
Unauthenticated Local File Inclusion in ITactics
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69177] Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.
Unauthenticated Local File Inclusion in Roneous
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69178] Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.
Unauthenticated Local File Inclusion in Truemag
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
17/06/2026
[CVE-2025-69179] Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.
Unauthenticated Privilege Escalation in Support Ticket Management System
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0019] In SettingsLib, there is a possible way to disable system components due to a logic error in the cod…
In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0063] In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier rest…
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69163] Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
Unauthenticated Local File Inclusion in WineShop
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69165] Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
Unauthenticated Local File Inclusion in Choreo
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69167] Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
Unauthenticated Local File Inclusion in Eros
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69168] Unauthenticated Local File Inclusion in Spike <= 1.2 versions.
Unauthenticated Local File Inclusion in Spike
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69171] Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
Unauthenticated Local File Inclusion in Orpheus
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
17/06/2026
[CVE-2025-69172] Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
Unauthenticated Local File Inclusion in Resurs
nvdaltovulnerabilidad CVSS 8.1 NVD